Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/604/WeZJybgHcZrzjGqA0MKwHFIIFYg.roa
File:                     WeZJybgHcZrzjGqA0MKwHFIIFYg.roa (raw, json)
Hash identifier:          lwOfmCESrn+OoNoXfwXi3L1OQ1itUc97z5JDLHRi3Dk=
Subject key identifier:   59:E6:49:C9:B8:07:71:9A:F3:8C:6A:80:D0:C2:B0:1C:52:08:15:88
Certificate issuer:       /CN=84F94F26AD23CBA93655AE34D806A8CE0A4C5907
Certificate serial:       4B
Authority key identifier: 84:F9:4F:26:AD:23:CB:A9:36:55:AE:34:D8:06:A8:CE:0A:4C:59:07
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/WeZJybgHcZrzjGqA0MKwHFIIFYg.roa
Signing time:             Tue 31 Mar 2026 08:34:22 +0000
ROA not before:           Tue 31 Mar 2026 08:34:22 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     17682
IP address blocks:        61.213.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84F94F26AD23CBA93655AE34D806A8CE0A4C5907
        Validity
            Not Before: Mar 31 08:34:22 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=59E649C9B807719AF38C6A80D0C2B01C52081588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ff:3d:1c:6c:17:8a:1d:29:95:c8:88:97:5d:
                    bd:6d:07:27:59:0e:27:af:21:5e:08:4e:8d:96:ad:
                    50:cf:c9:ae:a5:bb:8a:b6:62:35:8f:9d:b5:50:c5:
                    d9:b4:13:cb:9a:33:c1:60:53:a5:fe:d2:a4:6a:e4:
                    21:5f:9d:4a:89:a9:e1:08:c5:b5:75:dd:80:dd:96:
                    89:a4:93:f0:89:34:d9:c1:b4:82:ff:31:b7:4b:56:
                    68:82:70:b6:fb:bd:05:be:9b:06:4c:e5:0e:e6:c4:
                    eb:8f:29:4d:83:76:96:2c:0f:7b:50:aa:b7:5f:4e:
                    6f:52:99:d7:97:5e:01:53:31:45:40:6f:fb:d2:57:
                    1d:61:ef:fc:20:f5:28:64:bb:c0:36:8f:45:bf:9a:
                    ed:e9:f2:60:a7:6e:f8:e3:55:16:20:96:6b:a3:93:
                    b4:e7:4d:c4:1a:e2:14:05:0e:e2:c2:ab:59:7d:a0:
                    f9:fd:20:b3:c4:c6:df:72:ef:93:9a:6a:16:dc:ef:
                    26:ad:e8:17:ce:e3:6e:95:45:f1:6e:7a:47:05:14:
                    c3:47:4e:55:2f:e9:dc:d9:56:77:f1:ac:1e:8a:74:
                    c6:1f:07:e3:9e:c1:a1:f8:9e:82:ea:e1:cd:f3:cd:
                    57:03:a5:c3:7d:00:33:6a:ad:b8:e3:70:71:ef:4d:
                    f3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E6:49:C9:B8:07:71:9A:F3:8C:6A:80:D0:C2:B0:1C:52:08:15:88
            X509v3 Authority Key Identifier:
                keyid:84:F9:4F:26:AD:23:CB:A9:36:55:AE:34:D8:06:A8:CE:0A:4C:59:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/WeZJybgHcZrzjGqA0MKwHFIIFYg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.213.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         54:b6:11:16:a9:61:15:fd:98:c3:06:0c:b3:3d:a8:ca:dd:56:
         2e:09:7f:d0:d7:0b:9a:42:90:51:be:f0:d8:f8:a9:b7:8d:9b:
         e5:ac:c7:8f:fc:4e:58:e8:87:e2:82:69:4f:06:32:57:ac:ee:
         b1:0e:d0:25:7e:70:0f:13:70:f1:d1:d4:44:18:df:91:aa:f1:
         00:8b:13:07:af:ec:b5:81:d4:8c:bd:c3:c9:60:49:78:56:18:
         72:62:8c:2c:6a:1b:24:e1:7a:7f:88:45:b3:12:ab:65:0e:ca:
         da:80:40:d4:3e:4f:5a:7f:c1:9c:9d:f9:a0:5a:ed:14:21:87:
         51:43:ac:dc:b1:bd:b4:d1:24:4c:b2:8a:f8:11:fe:f6:80:c6:
         2c:64:e0:21:3b:0a:c6:ff:7e:31:94:17:24:30:e1:4b:84:5b:
         5c:08:68:9b:52:97:01:b7:dc:12:73:1c:2d:3d:a9:5f:cd:72:
         99:fb:37:33:d7:23:37:d0:db:87:b7:49:4a:b9:8a:c7:b5:0b:
         b0:72:92:17:2c:f6:e1:7c:56:93:3c:79:a6:4e:76:1e:70:7a:
         6d:fe:22:8b:0d:e4:0c:23:89:9f:a7:7c:cc:85:34:5b:61:a7:
         6d:28:b4:34:ac:f2:7d:07:32:ef:17:d7:a6:13:c5:01:bb:2f:
         42:98:6f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:25 2026 by rpki-client